Re: Errors 672, 672, 680, 529 every hour
From: Marina Roos [SBS-MVP] (marina_at_roos.nodontwantspam.nl.com)
Date: 05/11/04
- Next message: jhahn: "set up audit policies to detect and prevent security violations"
- Previous message: Marina Roos [SBS-MVP]: "Re: Adding new users"
- In reply to: Don Carver: "Errors 672, 672, 680, 529 every hour"
- Next in thread: saxophobe: "Re: Errors 672, 672, 680, 529 every hour"
- Reply: saxophobe: "Re: Errors 672, 672, 680, 529 every hour"
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 11 May 2004 21:44:50 +0200
Hi Don,
Check the services applet and see what service is using the administrators
account. If you have SQL 2000 installed, that is one of the services using
it.
-- Regards, Marina Microsoft SBS-MVP "Don Carver" <anonymous@discussions.microsoft.com> schreef in bericht news:922DE38E-1D48-40EA-A58E-89F9EFDE7D13@microsoft.com... > Can anyone tell me why we are getting these errors, every hour? I have renamed the administrator acccount as per the Security best practices. Is there a service trying to logon that is causing the errors? > > > Event Type: Failure Audit > Event Source: Security > Event Category: Account Logon > Event ID: 672 > Date: 5/11/2004 > Time: 1:19:12 PM > User: NT AUTHORITY\SYSTEM > Computer: SBSSERVER > Description: > Authentication Ticket Request: > User Name: administrator > Supplied Realm Name: CONSULTINGCO.LOCAL > User ID: - > Service Name: krbtgt/CONSULTINGCO.LOCAL > Service ID: - > Ticket Options: 0x40810010 > Result Code: 0x6 > Ticket Encryption Type: - > Pre-Authentication Type: - > Client Address: 127.0.0.1 > Certificate Issuer Name: > Certificate Serial Number: > Certificate Thumbprint: > > > Event Type: Failure Audit > Event Source: Security > Event Category: Account Logon > Event ID: 672 > Date: 5/11/2004 > Time: 1:19:12 PM > User: NT AUTHORITY\SYSTEM > Computer: SBSSERVER > Description: > Authentication Ticket Request: > User Name: administrator > Supplied Realm Name: CONSULTINGCO.LOCAL > User ID: - > Service Name: krbtgt/CONSULTINGCO.LOCAL > Service ID: - > Ticket Options: 0x40810010 > Result Code: 0x6 > Ticket Encryption Type: - > Pre-Authentication Type: - > Client Address: 127.0.0.1 > Certificate Issuer Name: > Certificate Serial Number: > Certificate Thumbprint: > > > > Event Type: Failure Audit > Event Source: Security > Event Category: Account Logon > Event ID: 680 > Date: 5/11/2004 > Time: 1:19:12 PM > User: NT AUTHORITY\SYSTEM > Computer: SBSSERVER > Description: > Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 > Logon account: administrator > Source Workstation: SBSSERVER > Error Code: 0xC0000064 > > > Event Type: Failure Audit > Event Source: Security > Event Category: Logon/Logoff > Event ID: 529 > Date: 5/11/2004 > Time: 1:19:12 PM > User: NT AUTHORITY\SYSTEM > Computer: SBSSERVER > Description: > Logon Failure: > Reason: Unknown user name or bad password > User Name: administrator > Domain: CONSULTINGCO > Logon Type: 3 > Logon Process: NtLmSsp > Authentication Package: NTLM > Workstation Name: SBSSERVER > Caller User Name: - > Caller Domain: - > Caller Logon ID: - > Caller Process ID: - > Transited Services: - > Source Network Address: - > Source Port: - > >
- Next message: jhahn: "set up audit policies to detect and prevent security violations"
- Previous message: Marina Roos [SBS-MVP]: "Re: Adding new users"
- In reply to: Don Carver: "Errors 672, 672, 680, 529 every hour"
- Next in thread: saxophobe: "Re: Errors 672, 672, 680, 529 every hour"
- Reply: saxophobe: "Re: Errors 672, 672, 680, 529 every hour"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
